The project description states that this module "Ignores access rules if a menu is not assigned to a Workbench Access section." If you have one access scheme, and an editor assigned to the root of that scheme, that means there's no way to prevent them from having access to a menu. I don't want my editors to have access to, e.g., Administration, Tools, User menu, etc.
I propose one of two options for when a menu is not assigned an access scheme to be configurable:
For resolution #2, a new 'Deny access to unassigned menus' checkbox would be added to admin/config/workflow/workbench_access/menu_settings.
For resolution #2, a new config parameter workbench_menu_access.settings -> deny_on_empty.
Needs review
2.0
Code
Here is a patch that controls access based on the Workbench Access 'Deny access to unassigned content' setting (option #1).